About icelandonlinecasino.is

Effective Date:20/05/2026
Data Controller: icelandonlinecasino.is
Privacy Contact: [email protected]

This Privacy Policy describes how icelandonlinecasino.is we collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and all applicable national data protection laws. It is structured around the moments in which you interact with us — so you can find the information most relevant to where you are in your experience with our platform. Reading this policy in full takes approximately eight minutes and we encourage you to do so.

§1 — When You Visit Our Website

What happens to my data the moment I land on icelandonlinecasino.is?

Before you have created an account or entered a single piece of personal information, our platform collects a limited set of technical data automatically. This includes your IP address, the type of browser and device you are using, your operating system version, the webpage that referred you to us, and anonymised data about which pages you visit and for how long. This technical collection is standard to the operation of any secure web platform. It allows us to serve the site correctly to your device, monitor for security threats, and understand aggregate patterns of how our platform is used.

Why do you collect this if I haven't signed up?

The legal basis for this processing is our legitimate interests in maintaining platform security, diagnosing technical errors, and analysing aggregate usage patterns. We do not use this data to build individual profiles of anonymous visitors or to make automated decisions about them.

What about cookies at this stage?

When you first visit icelandonlinecasino.is, a cookie consent banner is presented. Strictly necessary cookies — those required for the site to function, including session management and security tokens — are activated automatically and do not require your consent, as they are essential to service delivery. All other cookie categories require your explicit consent before activation.

The four cookie categories used on icelandonlinecasino.is are as follows. Strictly necessary cookies maintain your session, handle login authentication, and support core security functions. They expire at session end or within 24 hours. Functional cookies remember your language setting, display preferences, and interface choices, and persist for up to twelve months. Analytical cookies collect aggregated, anonymised data about how the platform is used, helping us identify errors and improve navigation. They are retained for up to thirteen months. Marketing cookies support personalised offers and track affiliate attribution. They persist for up to twenty-four months and are only activated with your consent.

You may review and change your cookie preferences at any time using the Cookie Settings panel in the platform footer. Withdrawing cookie consent does not affect your ability to use the core platform.

§2 — When You Register an Account

What personal data do I provide when I sign up?

Creating an account at icelandonlinecasino.is requires you to provide your full legal name, date of birth, email address, country of residence, and a chosen username and password. This information is necessary to establish your account, confirm you are of legal gambling age, and fulfil our contractual obligations to you. The legal basis for processing this data is the performance of a contract.

Why do I need to verify my identity?

We are legally required to verify the identity of all players before permitting real-money transactions. This regulatory obligation arises under applicable anti-money laundering legislation and gambling licensing requirements. Identity verification ("KYC") requires you to submit a government-issued photographic identification document and a recent proof of address. If required, we may also request a selfie alongside your identification document. These documents are processed by our regulated identity verification partner under a strict data processing agreement and are not retained beyond the legally required period.

Is my registration data shared with anyone?

Your registration data is shared only with the identity verification provider necessary to complete KYC checks, and with regulatory authorities where we hold a legal obligation to disclose. It is not sold, rented, or provided to any third party for commercial purposes.

§3 — When You Play

What data is generated when I use the games?

Each game session at icelandonlinecasino.is generates gameplay data, including the titles you play, your bet amounts, session start and end times, win and loss amounts, and game interaction patterns. This data is processed for three purposes: to deliver the gaming service you have contracted for, to fulfil our regulatory record-keeping requirements, and to monitor for indicators of problematic gambling behaviour as part of our responsible gambling obligations.

Do you use my gameplay data to profile me?

We analyse aggregate gameplay patterns to identify statistical indicators associated with gambling-related harm — such as rapid increases in session frequency, escalating deposit amounts, or loss-chasing behaviour. Where such indicators are present, our player welfare team may make proactive contact or implement account controls. This processing is conducted on the basis of our legitimate interests in player protection, balanced carefully against your privacy rights. It does not result in automated decisions that produce significant legal effects without human review.

How long do you keep my gameplay records?

Gameplay records are retained for three years from the date of the session, in compliance with regulatory audit requirements. After this period, records are permanently deleted from our systems.

§4 — When You Deposit or Withdraw

What financial data does icelandonlinecasino.is hold?

When you make a deposit or request a withdrawal, we collect data about your payment method, the transaction amount, currency, timestamp, and the reference identifier assigned by your payment provider. icelandonlinecasino.is does not store full card numbers on its systems at any point. Payment card data is processed in accordance with the Payment Card Industry Data Security Standard (PCI DSS). For alternative payment methods, only the data necessary to process and record the transaction is retained.

Who processes my payment data?

Payments are processed by regulated third-party payment service providers operating under formal data processing agreements with icelandonlinecasino.is. These providers handle transaction execution on our behalf and are contractually restricted from using your payment data for any purpose beyond the completion and recording of your transactions. Where any payment provider is located outside the European Economic Area, we ensure that Standard Contractual Clauses approved by the European Commission are in place before any data transfer occurs.

How long are transaction records kept?

Financial transaction records are retained for seven years from the transaction date, in compliance with applicable tax and financial regulation. Anti-money laundering legislation requires us to maintain account and identity records for five years following account closure. These retention obligations are mandatory and cannot be waived upon request for erasure.

§5 — Your Controls and Your Rights

What rights do I have over my personal data?

Under the GDPR, you hold seven enforceable rights in relation to personal data held by icelandonlinecasino.is. Each is described below with the practical steps for exercising it.

Right of Access. You may request a complete copy of all personal data we hold about you, together with information about how it is processed, the legal basis for processing, who it is shared with, and how long it is retained. Submit your request to [email protected]. We will respond within thirty calendar days of verifying your identity.

Right to Rectification. If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will complete verified rectification requests within thirty days. Certain data — such as verified identity documents — cannot be altered without submission of updated verification material.

Right to Erasure. You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. We will honour erasure requests in full except where retention is required by a legal obligation. Where we are unable to delete specific data, we will identify it and explain the applicable legal basis.

Right to Restriction. You may ask us to pause processing of your data while a dispute about its accuracy or lawfulness is under review. During restriction, your data is retained but not actively processed beyond storage.

Right to Data Portability. Where processing is based on your consent or on contract performance and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format. You may also request that we transmit it directly to another controller where technically feasible.

Right to Object. You may object at any time to processing based on our legitimate interests, including any profiling activity. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent. Where any processing activity is based on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

How do I exercise these rights?

Submit a written request to [email protected], including your full name, registered email address, and a description of the right you wish to exercise. We may ask for additional verification before actioning the request. There is no charge for standard requests. If you are dissatisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority and to seek judicial remedy without restriction.

§6 — Security and How We Protect What You Share

icelandonlinecasino.is applies a multi-layer technical and organisational security framework proportionate to the sensitivity of the data we hold. All data in transit is protected using Transport Layer Security (TLS) 1.2 or higher. Sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 standard encryption. Access to personal data within our organisation is strictly role-based: only staff with a defined operational need for specific data categories are granted access, and all access is logged and subject to periodic audit. Our platform undergoes regular independent penetration testing and vulnerability assessments. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within seventy-two hours and inform affected individuals without undue delay, in accordance with GDPR Article 33 and 34 obligations.

§7 — Policy Updates and How to Reach Us

icelandonlinecasino.is may update this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable law. When material changes are made, registered users will be notified by email and the updated policy will be published on our platform with a revised effective date. Continued use of the platform following such notification constitutes your acknowledgement of the updated policy.

For all privacy enquiries, data subject requests, or concerns about how your data is handled, contact us at:

icelandonlinecasino.is
[email protected]

We are committed to resolving all privacy matters constructively, transparently, and within the timeframes required by applicable law.

§8 — Third-Party Links and External Platforms

What if I follow a link from icelandonlinecasino.is to another website?

Our platform may contain links to third-party websites, affiliate partners, or payment providers whose privacy practices are governed by their own policies. icelandonlinecasino.is has no responsibility for the content or data handling practices of any external website. We recommend reviewing the privacy policy of any third-party site before submitting personal information. The presence of a link on our platform does not constitute an endorsement of that site's data practices. Players should exercise the same diligence with any external platform as they would with any online service handling personal data.